PT-2005-1434 · Sun Microsystems+1 · Storedge Enterprise Backup+2

Publicado 2005-08-20 · Atualizado 2017-07-11 · CVE-2005-0358

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC Legato NetWorker versions 6.0 and 6.1 Solstice Backup versions 6.0 and 6.1 StorEdge Enterprise Backup versions 6.0 through 7.2

Description The issue allows remote attackers to gain privileges by modifying an authentication token due to improper verification of authentication tokens.

Recommendations For EMC Legato NetWorker versions 6.0 and 6.1, update to a version that properly verifies authentication tokens. For Solstice Backup versions 6.0 and 6.1, update to a version that properly verifies authentication tokens. For StorEdge Enterprise Backup versions 6.0 through 7.2, update to a version that properly verifies authentication tokens. As a temporary workaround, consider restricting access to authentication token modification until a patch is available.

Correção

Identificadores relacionados

CVE-2005-0358

Produtos afetados

Emc Legato Networker

Solstice Backup

Storedge Enterprise Backup

Referências · 10

• http://kb.cert.org/vuls/id/407641 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21892 · Nota
• http://legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm · Nota
• http://securityfocus.com/bid/14582 · Aviso do Fabricante
• http://secunia.com/advisories/16464 · Aviso do Fabricante
• http://secunia.com/advisories/16470 · Aviso do Fabricante
• http://osvdb.org/18801 · Nota
• http://securitytracker.com/id?1014713 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-0358 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 · Aviso do Fabricante